Ai Agent
7 incidents, 2 live. 44 days since the last new one.
6 drains in the last 12 months
6 drains in the last 12 months
6 drains in 2026
1 drains in 2025
Live
-
Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server
Knostic reported on 8 September 2026 that gadgethumans-mcp, an npm MCP server that promises AI agents automatic x402 micropayments, asks users to set a wallet private key but does no local signing. Instead it copies the raw key into a request header and sends it to a remote endpoint on every recognized tool call, which would let whoever receives it take over the wallet. The package had 2,327 downloads in July and August 2026 and was still on npm when the report came out; Knostic found no confirmed thefts. Anyone who set a key in it should move funds and use a fresh, low-balance wallet.
gadgethumans-mcp (npm)·Base·Since Sep 8, 2026·
-
Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys
Bitdefender found that about 17% of the OpenClaw (ClawHub) AI-agent skills it analyzed in the first week of February 2026 behaved maliciously. Solana-themed skills made up 9.3% of the malicious set and Phantom-wallet skills 8.2%. Some skills told users to run fake installers that dropped the AMOS macOS stealer. Solana skills that read SOLANA_KEYPAIR_PATH can expose the plain-text keypair file that holds a wallet's private key. Payloads were staged on 91.92.242[.]30 and an impersonated OpenClaw GitHub repo. Anyone who installed crypto skills and ran their setup commands should move funds to a new wallet.
OpenClaw (ClawHub) skill users·Solana, Multiple EVM chains·Since Feb 5, 2026·
Past
July 2026 1
-
Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments
SecurityWeek reported on 6 July 2026 that Zscaler found two campaigns in use that plant hidden instructions on web pages for AI agents that can browse and pay. One used SEO poisoning to lure agents searching for a fake Python package, requests-secure-v2, backed by 10 GitHub repositories; the other typosquatted the DeFi portfolio tracker DeBank. In Zscaler's own tests 4 of 26 models were manipulated into making a payment and 2 mistook the fake DeBank site for the real one. No real losses were reported, but agents with spending power should only pay allow-listed recipients.
AI agents that browse the web and can pay·Multiple EVM chains·Since Jul 6, 2026·
May 2026 1
-
Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet
On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money.
Grok-linked Bankr wallet (Bankrbot on X)·Base·$155K stolen·Since May 4, 2026·
March 2026 1
-
Solana wallet MCP server on PyPI sent users' private keys to a remote server
An advisory published on 31 March 2026 flagged latinum-wallet-mcp, a PyPI package that runs a Solana wallet as an MCP server for AI agents, as malicious. From version 0.0.32 it sent the wallet's private key, along with other metrics, to a remote server during wallet setup, and from 0.0.34 it added itself as an MCP server for Claude on import; none of this was in the public GitHub code. Versions 0.0.32 to 0.0.36 are listed as affected. Anyone who installed them should treat that Solana key as stolen and move funds to a new wallet.
latinum-wallet-mcp (PyPI)·Solana·Since Mar 31, 2026·
February 2026 1
-
AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL
On 22 February 2026 Lobstar Wilde, an experimental AI trading agent with its own Solana wallet built by an OpenAI developer, answered an X reply asking for 4 SOL for a relative's medical treatment. Instead of a small amount it sent about 53 million LOBSTAR tokens, roughly 5% of supply and about $250,000 at the time, and the recipient sold them. The bot called it an accident; a decimal error was suggested by an X user but not confirmed by the creator. Agents that can send funds in response to public replies need hard per-transfer caps and human approval.
Lobstar Wilde, an experimental AI trading agent on X·Solana·$250K stolen·Since Feb 22, 2026·
March 2025 1
-
Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet
On 18 March 2025 an attacker got into the dashboard of AIXBT, an autonomous AI crypto agent, and queued two prompts that made it transfer about 55.5 ETH (about $106,200) out of its wallet on Base. The maintainer said core systems were not affected and the AI itself was not manipulated; the weak point was access to the agent's control dashboard. Keys were swapped, dashboard access was paused and the attacker's addresses were reported to exchanges. Anyone running an AI agent with a wallet should lock down its control panel and cap what it can send.
AIXBT AI agent wallet·Base·$106K stolen·Since Mar 18, 2025·
No drains match these filters.